Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-24134 |
6.5 (3.1)
|
StudioCMS has an Authorization Bypass Through User-Con… |
withstudiocms |
studiocms |
2026-01-27T23:34:55.922Z | 2026-01-28T15:08:38.778Z |
| CVE-2026-24784 |
6.8 (3.1)
|
DotNetNuke.Core has a potential XSS vulnerability in m… |
dnnsoftware |
Dnn.Platform |
2026-01-27T23:47:41.846Z | 2026-01-28T15:06:44.527Z |
| CVE-2026-1237 |
2.1 (4.0)
|
Vulnerable cross-model authorization in juju. If … |
Canonical |
juju |
2026-01-28T15:01:46.364Z | 2026-01-28T15:06:23.120Z |
| CVE-2026-1244 |
6.4 (3.1)
|
Forms Bridge <= 4.2.5 - Authenticated (Contributor+) S… |
codeccoop |
Forms Bridge – Infinite integrations |
2026-01-28T06:43:41.879Z | 2026-01-28T15:04:11.678Z |
| CVE-2026-24838 |
9.1 (3.1)
|
DotNetNuke.Core Vulnerable to Stored XSS via Module Title |
dnnsoftware |
Dnn.Platform |
2026-01-27T23:58:33.340Z | 2026-01-28T15:03:27.676Z |
| CVE-2026-24839 |
4.7 (3.1)
|
Dokploy has a clickjacking vulnerability - Missing X-F… |
Dokploy |
dokploy |
2026-01-28T00:01:49.253Z | 2026-01-28T15:02:29.344Z |
| CVE-2026-0825 |
5.3 (3.1)
|
Database for Contact Form 7, WPforms, Elementor forms … |
crmperks |
Database for Contact Form 7, WPforms, Elementor forms |
2026-01-28T06:43:42.726Z | 2026-01-28T15:02:15.499Z |
| CVE-2026-24840 |
8 (3.1)
|
Dokploy uses hardcoded credentials in installation scr… |
Dokploy |
dokploy |
2026-01-28T00:15:57.299Z | 2026-01-28T15:01:06.280Z |
| CVE-2026-1295 |
6.4 (3.1)
|
Buy Now Plus <= 1.0.2 - Authenticated (Contributor+) S… |
supercleanse |
Stripe Payments by Buy Now Plus – Best WordPress Stripe Credit Card Payments Plugin |
2026-01-28T06:43:43.151Z | 2026-01-28T15:00:15.494Z |
| CVE-2026-24841 |
9.9 (3.1)
|
Dokploy Vulnerable to Authenticated Remote Code Execut… |
Dokploy |
dokploy |
2026-01-28T00:18:23.724Z | 2026-01-28T14:59:11.561Z |
| CVE-2026-1056 |
9.8 (3.1)
|
Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrar… |
inc2734 |
Snow Monkey Forms |
2026-01-28T12:28:36.867Z | 2026-01-28T14:58:00.639Z |
| CVE-2025-9082 |
6.4 (3.1)
|
WPBITS Addons For Elementor <= 1.8 - Authenticated (Co… |
wpbits |
WPBITS Addons For Elementor Page Builder |
2026-01-28T06:43:43.643Z | 2026-01-28T14:57:16.255Z |
| CVE-2025-14865 |
6.4 (3.1)
|
Passster – Password Protect Pages and Content <= 4.2.2… |
wpchill |
Passster – Password Protect Pages and Content |
2026-01-28T12:28:37.446Z | 2026-01-28T14:56:32.212Z |
| CVE-2026-24842 |
8.2 (3.1)
|
node-tar Vulnerable to Arbitrary File Creation/Overwri… |
isaacs |
node-tar |
2026-01-28T00:20:13.261Z | 2026-01-28T14:56:10.317Z |
| CVE-2020-36985 |
8.5 (4.0)
7.8 (3.1)
|
IP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Servi… |
Gearboxcomputers |
IP Watcher |
2026-01-28T12:28:59.200Z | 2026-01-28T14:55:34.608Z |
| CVE-2025-12709 |
6.4 (3.1)
|
Interactions – Create Interactive Experiences in the B… |
bfintal |
Interactions – Create Interactive Experiences in the Block Editor |
2026-01-28T06:43:44.129Z | 2026-01-28T14:55:05.974Z |
| CVE-2026-24850 |
5.3 (3.1)
|
ML-DSA Signature Verification Accepts Signatures with … |
RustCrypto |
signatures |
2026-01-28T00:24:53.146Z | 2026-01-28T14:54:22.827Z |
| CVE-2020-36986 |
8.5 (4.0)
7.8 (3.1)
|
Prey 1.9.6 - "CronService" Unquoted Service Path |
Preyproject |
Prey |
2026-01-28T12:28:59.643Z | 2026-01-28T14:54:14.615Z |
| CVE-2020-36987 |
8.5 (4.0)
7.8 (3.1)
|
Program Access Controller v1.2.0.0 - 'PACService.exe' … |
Gearboxcomputers |
Program Access Controller |
2026-01-28T12:29:00.306Z | 2026-01-28T14:53:35.873Z |
| CVE-2025-14039 |
6.4 (3.1)
|
Simple Folio <= 1.1.1 - Authenticated (Contributor+) S… |
presstigers |
Simple Folio |
2026-01-28T06:43:44.697Z | 2026-01-28T14:53:07.989Z |
| CVE-2026-24852 |
6.1 (3.1)
|
iccDEV has a heap-buffer-overflow in icXmlParseTextString() |
InternationalColorConsortium |
iccDEV |
2026-01-28T00:27:11.575Z | 2026-01-28T14:51:35.732Z |
| CVE-2026-1310 |
5.3 (3.1)
|
Simple calendar for Elementor <= 1.6.6 - Missing Autho… |
migaweb |
Simple calendar for Elementor |
2026-01-28T06:43:45.172Z | 2026-01-28T14:50:23.612Z |
| CVE-2026-21569 |
7.9 (3.0)
|
This High severity XXE (XML External Entity Injec… |
Atlassian |
Crowd Data Center |
2026-01-28T00:30:00.557Z | 2026-01-28T14:49:56.282Z |
| CVE-2026-0832 |
7.3 (3.1)
|
New User Approve <= 3.2.2 - Missing Authorization to U… |
saadiqbal |
New User Approve |
2026-01-28T06:43:45.651Z | 2026-01-28T14:48:01.546Z |
| CVE-2020-36988 |
4.8 (4.0)
5.4 (3.1)
|
PDW File Browser <= v1.3 - Cross-Site Scripting (XSS) |
GuidoNeele |
PDW File Browser |
2026-01-28T12:29:00.706Z | 2026-01-28T14:47:39.358Z |
| CVE-2026-1389 |
5.3 (3.1)
|
Document Embedder <= 2.0.4 - Insecure Direct Object Re… |
bplugins |
Document Embedder – Embed PDFs, Word, Excel, and Other Files |
2026-01-28T07:27:34.729Z | 2026-01-28T14:45:49.405Z |
| CVE-2026-1505 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
D-Link DIR-615 URL Filter set_temp_nodes.php os comman… |
D-Link |
DIR-615 |
2026-01-28T01:32:08.889Z | 2026-01-28T14:45:20.266Z |
| CVE-2020-36989 |
8.5 (4.0)
7.8 (3.1)
|
ForensiTAppxService 2.2.0.4 - 'ForensiTAppxService.exe… |
Forensit |
ForensiTAppxService |
2026-01-28T12:29:01.182Z | 2026-01-28T14:44:02.201Z |
| CVE-2026-1054 |
5.3 (3.1)
|
RegistrationMagic <= 6.0.7.4 - Missing Authorization t… |
metagauss |
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login |
2026-01-28T07:27:35.396Z | 2026-01-28T14:43:48.192Z |
| CVE-2026-1506 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
D-Link DIR-615 MAC Filter Configuration adv_mac_filter… |
D-Link |
DIR-615 |
2026-01-28T02:32:09.027Z | 2026-01-28T14:43:26.080Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-9014 |
6.3 (4.0)
|
Null Pointer Dereference Vulnerability on TL-WR841N |
TP-Link Systems Inc. |
TL-WR841N v14 |
2026-01-15T17:36:06.139Z | 2026-01-15T18:26:28.154Z |
| CVE-2023-33944 |
4.8 (3.1)
|
Cross-site scripting (XSS) vulnerability in Layou… |
Liferay |
Portal |
2023-05-24T15:07:14.026Z | 2024-10-22T15:52:07.008Z |
| CVE-2023-33943 |
5.4 (3.1)
|
Cross-site scripting (XSS) vulnerability in the A… |
Liferay |
Portal |
2023-05-24T14:57:46.177Z | 2024-10-22T15:52:13.867Z |
| CVE-2024-50120 |
N/A
|
smb: client: Handle kstrdup failures for passwords |
Linux |
Linux |
2024-11-05T17:10:49.887Z | 2025-05-04T12:59:34.110Z |
| CVE-2025-21439 |
7.8 (3.1)
|
Out-of-bounds Read in Windows WLAN Host |
Qualcomm, Inc. |
Snapdragon |
2025-04-07T10:16:07.416Z | 2025-04-08T03:55:59.260Z |
| CVE-2025-8889 |
3.8 (3.1)
|
Compress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload |
Unknown |
Compress & Upload |
2025-09-09T06:00:08.095Z | 2025-11-13T20:58:02.324Z |
| CVE-2025-48755 |
2.9 (3.1)
|
In the spiral-rs crate 0.2.0 for Rust, allocation… |
blyssprivacy |
sdk |
2025-05-24T00:00:00.000Z | 2025-05-24T10:14:00.839Z |
| CVE-2026-1407 |
1 (4.0)
2 (3.1)
2 (3.0)
|
Beetel 777VR1 UART information disclosure |
Beetel |
777VR1 |
2026-01-25T22:02:06.278Z | 2026-01-26T15:45:14.741Z |
| CVE-2025-48754 |
2.9 (3.1)
|
In the memory_pages crate 0.1.0 for Rust, divisio… |
FractalFir |
memory_pages |
2025-05-24T00:00:00.000Z | 2025-05-24T10:15:27.718Z |
| CVE-2025-13505 |
4.8 (3.1)
|
Stored XSS in Datateam's Datactive |
Datateam Information Technologies Inc. |
Datactive |
2025-12-02T14:22:25.994Z | 2025-12-02T14:28:14.676Z |
| CVE-2025-13879 |
5.1 (4.0)
|
Directory traversal vulnerability in EfficientIP's SOL… |
SOLIDserver |
SOLIDserver IPAM |
2025-12-02T12:23:15.740Z | 2025-12-02T16:54:08.768Z |
| CVE-2026-1408 |
1 (4.0)
2 (3.1)
2 (3.0)
|
Beetel 777VR1 UART weak password |
Beetel |
777VR1 |
2026-01-25T23:02:06.097Z | 2026-01-26T17:30:28.524Z |
| CVE-2026-23743 |
6.9 (4.0)
|
Discourse allows permalinks to restricted resources to… |
discourse |
discourse |
2026-01-28T20:07:21.266Z | 2026-01-28T21:07:37.739Z |
| CVE-2026-24742 |
6.5 (3.1)
|
Discourse staff action logs expose sensitive informati… |
discourse |
discourse |
2026-01-28T20:11:30.982Z | 2026-01-28T20:35:27.216Z |
| CVE-2025-66488 |
4.6 (3.1)
|
Discourse allows script execution in uploaded HTML/XML… |
discourse |
discourse |
2026-01-28T18:15:52.902Z | 2026-01-28T19:29:11.123Z |
| CVE-2026-21865 |
6.5 (3.1)
|
Discourse topic conversion permission vulnerability fo… |
discourse |
discourse |
2026-01-28T19:51:37.991Z | 2026-01-28T20:10:06.915Z |
| CVE-2022-3689 |
7.2 (3.1)
|
HTML Forms < 1.3.25 - Admin+ SQLi |
Unknown |
HTML Forms |
2022-11-28T13:47:10.138Z | 2025-04-25T15:02:21.600Z |
| CVE-2023-50836 |
5.9 (3.1)
|
WordPress HTML Forms Plugin <= 1.3.28 is vulnerable to… |
ibericode |
HTML Forms |
2023-12-28T10:19:57.333Z | 2024-11-20T19:39:26.127Z |
| CVE-2024-6243 |
5.9 (3.1)
|
HTML Forms < 1.3.33 - Admin+ Stored XSS |
Unknown |
HTML Forms |
2024-07-22T06:00:06.064Z | 2024-08-01T21:33:05.323Z |
| CVE-2024-6412 |
6.5 (3.1)
|
HTML Forms – Simple WordPress Forms Plugin < 1.3.34 - … |
Unknown |
HTML Forms |
2024-07-31T06:00:04.014Z | 2024-08-01T17:41:48.337Z |
| CVE-2025-46236 |
6.5 (3.1)
|
WordPress HTML Forms <= 1.5.2 - Cross Site Scripting (… |
Link Software LLC |
HTML Forms |
2025-04-22T09:53:25.263Z | 2025-04-22T14:12:04.172Z |
| CVE-2024-11090 |
5.3 (3.1)
|
Membership Plugin – Restrict Content <= 3.2.13 - Unaut… |
stellarwp |
Membership Plugin – Restrict Content |
2025-01-26T06:41:20.755Z | 2025-01-27T14:40:21.275Z |
| CVE-2025-9276 |
9.8 (3.0)
|
Cockroach Labs cockroach-k8s-request-cert Empty Root P… |
Cockroach Labs |
cockroach-k8s-request-cert |
2025-09-02T20:00:51.838Z | 2025-09-03T15:32:42.164Z |
| CVE-2026-1409 |
1 (4.0)
2 (3.1)
2 (3.0)
|
Beetel 777VR1 UART excessive authentication |
Beetel |
777VR1 |
2026-01-25T23:32:06.715Z | 2026-01-26T17:29:59.180Z |
| CVE-2025-57156 |
7.5 (3.1)
|
NULL pointer dereference in the dacp_reply_playqu… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T14:50:17.449Z |
| CVE-2025-59464 |
6.5 (3.0)
|
A memory leak in Node.js’s OpenSSL integration oc… |
nodejs |
node |
2026-01-20T20:41:55.599Z | 2026-01-21T20:41:09.437Z |
| CVE-2025-59465 |
7.5 (3.0)
|
A malformed `HTTP/2 HEADERS` frame with oversized… |
nodejs |
node |
2026-01-20T20:41:55.317Z | 2026-01-21T20:11:28.986Z |
| CVE-2025-59466 |
5.9 (3.0)
|
We have identified a bug in Node.js error handlin… |
nodejs |
node |
2026-01-20T20:41:55.628Z | 2026-01-21T18:52:57.892Z |
| CVE-2025-63647 |
7.5 (3.1)
|
A NULL pointer dereference in the parse_meta func… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T14:52:39.071Z |
| CVE-2026-1410 |
5.4 (4.0)
6.4 (3.1)
6.4 (3.0)
|
Beetel 777VR1 UART missing authentication |
Beetel |
777VR1 |
2026-01-26T00:02:05.878Z | 2026-01-26T17:29:34.409Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-21439 | Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the… | 2025-04-07T11:15:52.457 | 2026-01-30T20:39:24.563 |
| fkie_cve-2025-8889 | The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allo… | 2025-09-09T06:15:32.370 | 2026-01-30T20:38:51.963 |
| fkie_cve-2025-48755 | In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type). | 2025-05-24T03:15:24.193 | 2026-01-30T20:38:29.627 |
| fkie_cve-2026-1407 | A security flaw has been discovered in Beetel 777VR1 up to 01.00.09/01.00.09_55. This affects an un… | 2026-01-25T22:16:00.563 | 2026-01-30T20:34:56.397 |
| fkie_cve-2025-48754 | In the memory_pages crate 0.1.0 for Rust, division by zero can occur. | 2025-05-24T03:15:24.027 | 2026-01-30T20:34:49.800 |
| fkie_cve-2025-13505 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improp… | 2025-12-02T15:15:49.623 | 2026-01-30T20:32:54.783 |
| fkie_cve-2025-13879 | Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenti… | 2025-12-02T13:15:53.353 | 2026-01-30T20:32:44.753 |
| fkie_cve-2026-1408 | A weakness has been identified in Beetel 777VR1 up to 01.00.09/01.00.09_55. This vulnerability affe… | 2026-01-25T23:15:48.127 | 2026-01-30T20:32:13.860 |
| fkie_cve-2026-23743 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T21:16:11.597 | 2026-01-30T20:31:49.593 |
| fkie_cve-2026-24742 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T21:16:11.913 | 2026-01-30T20:31:42.753 |
| fkie_cve-2025-66488 | Discourse is an open source discussion platform. A vulnerability present in versions prior to 3.5.4… | 2026-01-28T19:16:22.453 | 2026-01-30T20:31:25.150 |
| fkie_cve-2026-21865 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:14.530 | 2026-01-30T20:30:18.947 |
| fkie_cve-2022-3689 | The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before … | 2022-11-28T14:15:13.530 | 2026-01-30T20:28:37.070 |
| fkie_cve-2023-50836 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2023-12-28T11:15:09.333 | 2026-01-30T20:28:32.403 |
| fkie_cve-2024-6243 | The HTML Forms WordPress plugin before 1.3.33 does not sanitize and escape the form message inputs… | 2024-07-22T06:15:02.663 | 2026-01-30T20:28:24.210 |
| fkie_cve-2024-6412 | The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which coul… | 2024-07-31T06:15:04.083 | 2026-01-30T20:28:17.483 |
| fkie_cve-2025-46236 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-04-22T10:15:16.943 | 2026-01-30T20:28:01.297 |
| fkie_cve-2024-11090 | The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Informatio… | 2025-01-26T07:15:08.750 | 2026-01-30T20:27:55.477 |
| fkie_cve-2025-9276 | Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. … | 2025-09-02T20:15:40.407 | 2026-01-30T20:27:48.443 |
| fkie_cve-2026-1409 | A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.09_55. This issue … | 2026-01-26T00:16:03.050 | 2026-01-30T20:27:24.987 |
| fkie_cve-2025-57156 | NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in ownt… | 2026-01-20T21:16:03.790 | 2026-01-30T20:27:01.903 |
| fkie_cve-2025-59464 | A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to… | 2026-01-20T21:16:03.900 | 2026-01-30T20:26:26.333 |
| fkie_cve-2025-59465 | A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash … | 2026-01-20T21:16:04.010 | 2026-01-30T20:25:39.890 |
| fkie_cve-2025-59466 | We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors … | 2026-01-20T21:16:04.110 | 2026-01-30T20:25:11.810 |
| fkie_cve-2025-63647 | A NULL pointer dereference in the parse_meta function (src/httpd_daap.c) of owntone-server commit 3… | 2026-01-20T21:16:04.220 | 2026-01-30T20:24:28.027 |
| fkie_cve-2026-1410 | A vulnerability was detected in Beetel 777VR1 up to 01.00.09/01.00.09_55. Impacted is an unknown fu… | 2026-01-26T01:15:48.773 | 2026-01-30T20:24:17.860 |
| fkie_cve-2025-63648 | A NULL pointer dereference in the dacp_reply_playqueueedit_move function (src/httpd_dacp.c) of ownt… | 2026-01-20T21:16:04.333 | 2026-01-30T20:23:34.890 |
| fkie_cve-2025-66692 | A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5… | 2026-01-20T21:16:04.437 | 2026-01-30T20:22:09.553 |
| fkie_cve-2025-66902 | An input validation issue in in Pithikos websocket-server v.0.6.4 allows a remote attacker to obtai… | 2026-01-20T21:16:04.557 | 2026-01-30T20:21:29.483 |
| fkie_cve-2026-21636 | A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network … | 2026-01-20T21:16:05.813 | 2026-01-30T20:20:56.843 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-rj4c-4hgr-w984 |
7.8 (3.1)
8.5 (4.0)
|
EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows loca… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-jv2h-2w94-chwv |
7.8 (3.1)
8.5 (4.0)
|
Motorola Device Manager 2.5.4 contains an unquoted service path vulnerability in the MotoHelperServ… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-85q3-6228-58f9 |
7.8 (3.1)
8.5 (4.0)
|
SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its Windows service con… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-7jqp-g5vc-78qc |
7.8 (3.1)
8.5 (4.0)
|
Motorola Device Manager 2.4.5 contains an unquoted service path vulnerability in the PST Service th… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-56p5-hjp2-w73q |
7.8 (3.1)
8.5 (4.0)
|
Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its ser… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-3wfw-hw9j-3p3m |
6.4 (3.1)
5.1 (4.0)
|
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-rxx2-x5v3-hv94 |
5.4 (3.1)
|
Worklenz version 2.1.5 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Project Up… | 2026-01-26T21:30:36Z | 2026-01-27T21:31:46Z |
| ghsa-q7qm-9q6p-5wg7 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:38Z | 2026-01-27T21:31:46Z |
| ghsa-pmpq-66cp-597x |
8.8 (3.1)
|
The binary serving the web server and executing basically all actions launched from the Web UI is r… | 2026-01-26T12:30:29Z | 2026-01-27T21:31:46Z |
| ghsa-jc49-q8pm-mwx9 |
7.8 (3.1)
8.5 (4.0)
|
Realtek Andrea RT Filters 1.0.64.7 contains an unquoted service path vulnerability that allows loca… | 2026-01-27T21:31:46Z | 2026-01-27T21:31:46Z |
| ghsa-h7wx-c535-fxf8 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:37Z | 2026-01-27T21:31:46Z |
| ghsa-5xj3-mjvp-h43q |
5.5 (3.1)
|
The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed vi… | 2026-01-27T18:32:17Z | 2026-01-27T21:31:46Z |
| ghsa-387g-7jpp-vpxj |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:38Z | 2026-01-27T21:31:46Z |
| ghsa-vgxm-x435-rmh6 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in John James Jacoby WP Term Order wp-term-order al… | 2026-01-23T15:31:36Z | 2026-01-27T21:31:45Z |
| ghsa-m8pw-x258-449r |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:35Z | 2026-01-27T21:31:45Z |
| ghsa-g43m-r7jr-63q9 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Sit… | 2026-01-23T15:31:36Z | 2026-01-27T21:31:45Z |
| ghsa-r4q4-9cp2-vvhf |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:41Z | 2026-01-27T21:31:44Z |
| ghsa-p9jf-6qr6-p275 |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Justicia justicia a… | 2026-01-22T18:30:40Z | 2026-01-27T21:31:44Z |
| ghsa-fxrx-2p93-9gf3 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:35Z | 2026-01-27T21:31:44Z |
| ghsa-fq2m-74v3-27rh |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Timur Kamaev Kama Thumbnail kama-thumbnail allow… | 2026-01-23T15:31:35Z | 2026-01-27T21:31:44Z |
| ghsa-9cj6-xv7g-cmmg |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:41Z | 2026-01-27T21:31:44Z |
| ghsa-wcrq-p45c-535j |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Overton overton all… | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-vf62-mr8q-5x6j |
5.4 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Electrician - Electrical Service … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-r27c-7g4j-xm44 |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterina… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-q32f-r8pm-4x22 |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Ex… | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-phpf-j5wm-v54r |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:41Z | 2026-01-27T21:31:43Z |
| ghsa-mv6g-87f6-hxrp |
7.6 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-jm69-rg69-2cwx |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:43Z |
| ghsa-jfcc-c4r2-57h6 |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in gregmolnar Simple XML Sitemap simple-xml-sitemap… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-grxh-vmwr-556w |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Dolcino dolcino all… | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-239 |
|
meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues a… | meinheld | 2020-05-22T16:15:00Z | 2021-08-27T03:22:06.793758Z |
| pysec-2020-238 |
|
AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interp… | matrix-synapse | 2020-10-19T17:15:00Z | 2021-08-27T03:22:06.522203Z |
| pysec-2020-237 |
|
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinit… | matrix-synapse | 2020-11-24T03:15:00Z | 2021-08-27T03:22:06.477416Z |
| pysec-2020-236 |
|
Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a refere… | matrix-synapse | 2020-12-09T19:15:00Z | 2021-08-27T03:22:06.434071Z |
| pysec-2020-235 |
|
python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues. | markdown2 | 2020-01-15T21:15:00Z | 2021-08-27T03:22:06.220553Z |
| pysec-2019-187 |
|
Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is … | matrix-synapse | 2019-03-21T16:01:00Z | 2021-08-27T03:22:06.392030Z |
| pysec-2019-186 |
|
Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events… | matrix-synapse | 2019-11-08T00:15:00Z | 2021-08-27T03:22:06.354909Z |
| pysec-2019-185 |
|
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random… | matrix-synapse | 2019-05-09T18:29:00Z | 2021-08-27T03:22:06.320363Z |
| pysec-2016-29 |
|
The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arb… | mercurial | 2016-04-13T16:59:00Z | 2021-08-27T03:22:06.971468Z |
| pysec-2016-28 |
|
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to … | mercurial | 2016-05-09T20:59:00Z | 2021-08-27T03:22:06.927942Z |
| pysec-2016-27 |
|
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted na… | mercurial | 2016-04-13T16:59:00Z | 2021-08-27T03:22:06.881570Z |
| pysec-2016-26 |
|
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted gi… | mercurial | 2016-04-13T16:59:00Z | 2021-08-27T03:22:06.833176Z |
| pysec-2014-84 |
|
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, wh… | logilab-common | 2014-03-11T19:37:00Z | 2021-08-27T03:22:06.108554Z |
| pysec-2014-83 |
|
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons… | logilab-common | 2014-03-11T19:37:00Z | 2021-08-27T03:22:06.075755Z |
| pysec-2021-130 |
|
JupyterLab is a user interface for Project Jupyter which will eventually replace the clas… | jupyterlab | 2021-08-09T21:15:00Z | 2021-08-27T03:22:05.377903Z |
| pysec-2020-234 |
|
Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously cra… | jupyter-server | 2020-11-24T21:15:00Z | 2021-08-27T03:22:05.136094Z |
| pysec-2019-184 |
|
Ladon since 0.6.1 (since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059) is affected by: XML Ex… | ladon | 2019-07-18T17:15:00Z | 2021-08-27T03:22:05.932908Z |
| pysec-2019-183 |
|
Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation. | koji | 2019-10-09T22:15:00Z | 2021-08-27T03:22:05.900614Z |
| pysec-2019-182 |
|
Python keyring has insecure permissions on new databases allowing world-readable files to… | keyring | 2019-11-25T13:15:00Z | 2021-08-27T03:22:05.663844Z |
| pysec-2019-181 |
|
Python keyring lib before 0.10 created keyring files with world-readable permissions. | keyring | 2019-10-28T17:15:00Z | 2021-08-27T03:22:05.629168Z |
| pysec-2018-86 |
|
Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability … | koji | 2018-04-04T20:29:00Z | 2021-08-27T03:22:05.857986Z |
| pysec-2018-85 |
|
python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a l… | kdcproxy | 2018-10-30T18:29:00Z | 2021-08-27T03:22:05.569463Z |
| pysec-2018-84 |
|
JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juni… | jsnapy | 2018-04-11T19:29:00Z | 2021-08-27T03:22:05.101975Z |
| pysec-2014-82 |
|
FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, w… | jinja2 | 2014-05-19T14:55:00Z | 2021-08-27T03:22:05.027573Z |
| pysec-2020-233 |
|
In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can i… | freewvs | 2020-07-14T22:15:00Z | 2021-08-27T03:22:04.227798Z |
| pysec-2020-232 |
|
In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, … | freewvs | 2020-07-14T20:15:00Z | 2021-08-27T03:22:04.199703Z |
| pysec-2019-180 |
|
A code injection issue was discovered in ipycache through 2016-05-31. | ipycache | 2019-03-21T21:29:00Z | 2021-08-27T03:22:04.582276Z |
| pysec-2017-87 |
|
A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.… | hpack | 2017-01-10T15:59:00Z | 2021-08-27T03:22:04.412157Z |
| pysec-2020-231 |
|
Feedgen (python feedgen) before 0.9.0 is susceptible to XML Denial of Service attacks. Th… | feedgen | 2020-01-28T23:15:00Z | 2021-08-27T03:22:03.690780Z |
| pysec-2019-179 |
|
The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact … | flask | 2019-07-17T14:15:00Z | 2021-08-27T03:22:03.986184Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3666 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.180854Z |
| gsd-2024-3665 | The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Si… | 2024-04-12T05:02:29.157248Z |
| gsd-2024-3664 | The Quick Featured Images plugin for WordPress is vulnerable to unauthorized modification… | 2024-04-12T05:02:29.381775Z |
| gsd-2024-3663 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.232016Z |
| gsd-2024-3662 | The WPZOOM Social Feed Widget & Block plugin for WordPress is vulnerable to unauthorized … | 2024-04-12T05:02:29.094064Z |
| gsd-2024-3661 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.334294Z |
| gsd-2024-3660 | A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows a… | 2024-04-12T05:02:29.135418Z |
| gsd-2024-3659 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.110633Z |
| gsd-2024-3658 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.149313Z |
| gsd-2024-3657 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.175242Z |
| gsd-2024-3656 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.322371Z |
| gsd-2024-3655 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.328113Z |
| gsd-2024-3654 | An XSS vulnerability has been found in Teimas Global's Teixo, version 1.42.42-stable. Thi… | 2024-04-12T05:02:29.388870Z |
| gsd-2024-3653 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.305991Z |
| gsd-2024-28890 | Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vu… | 2024-04-12T05:02:27.433930Z |
| gsd-2024-31857 | Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnera… | 2024-04-12T05:02:24.119700Z |
| gsd-2024-31077 | Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability … | 2024-04-12T05:02:23.838101Z |
| gsd-2024-32150 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.142222Z |
| gsd-2024-32149 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.142912Z |
| gsd-2024-32148 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.120921Z |
| gsd-2024-32147 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.125220Z |
| gsd-2024-32146 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.151856Z |
| gsd-2024-32145 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.152492Z |
| gsd-2024-32144 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.137512Z |
| gsd-2024-32143 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.152686Z |
| gsd-2024-32142 | Missing Authorization vulnerability in Ovic Team Ovic Responsive WPBakery.This issue affe… | 2024-04-12T05:02:22.124289Z |
| gsd-2024-32141 | Cross-Site Request Forgery (CSRF) vulnerability in Libsyn Libsyn Publisher Hub.This issue… | 2024-04-12T05:02:22.149750Z |
| gsd-2024-32140 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.137101Z |
| gsd-2024-32139 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.143498Z |
| gsd-2024-32138 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.155239Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-192763 | Malicious code in supply_chain_dummy_test_4 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| MAL-2025-192762 | Malicious code in supply_chain_dummy_test_3 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| MAL-2025-192761 | Malicious code in supply_chain_dummy_test_2 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| MAL-2025-192760 | Malicious code in supply_chain_dummy_test_1 (npm) | 2025-12-23T19:07:55Z | 2025-12-24T00:53:20Z |
| MAL-2025-192759 | Malicious code in start-log-plugin (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| MAL-2025-192758 | Malicious code in start-log-backend (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| MAL-2025-192729 | Malicious code in streamixer (npm) | 2025-12-23T16:22:41Z | 2025-12-24T00:53:20Z |
| mal-2025-192757 | Malicious code in qxytest1 (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:19Z |
| mal-2025-192756 | Malicious code in qxytest (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:19Z |
| mal-2025-192749 | Malicious code in rpc-validate (npm) | 2025-12-23T18:19:20Z | 2025-12-24T00:53:19Z |
| MAL-2025-192757 | Malicious code in qxytest1 (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:19Z |
| MAL-2025-192756 | Malicious code in qxytest (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:19Z |
| MAL-2025-192749 | Malicious code in rpc-validate (npm) | 2025-12-23T18:19:20Z | 2025-12-24T00:53:19Z |
| mal-2025-192807 | Malicious code in json-panels (npm) | 2025-12-23T08:17:48Z | 2025-12-24T00:53:18Z |
| mal-2025-192748 | Malicious code in lotusbail (npm) | 2025-12-23T17:40:05Z | 2025-12-24T00:53:18Z |
| MAL-2025-192807 | Malicious code in json-panels (npm) | 2025-12-23T08:17:48Z | 2025-12-24T00:53:18Z |
| MAL-2025-192748 | Malicious code in lotusbail (npm) | 2025-12-23T17:40:05Z | 2025-12-24T00:53:18Z |
| mal-2025-192806 | Malicious code in jest-formatting (npm) | 2025-12-23T08:17:34Z | 2025-12-24T00:53:17Z |
| mal-2025-192805 | Malicious code in intuit-test (npm) | 2025-12-23T08:17:01Z | 2025-12-24T00:53:17Z |
| mal-2025-192804 | Malicious code in injectorpackage (npm) | 2025-12-23T08:16:49Z | 2025-12-24T00:53:17Z |
| mal-2025-192803 | Malicious code in init-router (npm) | 2025-12-23T08:16:47Z | 2025-12-24T00:53:17Z |
| mal-2025-192802 | Malicious code in ingka-test (npm) | 2025-12-23T08:16:45Z | 2025-12-24T00:53:17Z |
| mal-2025-192801 | Malicious code in hiro-docs (npm) | 2025-12-23T08:16:14Z | 2025-12-24T00:53:17Z |
| mal-2025-192800 | Malicious code in gibertserct8 (npm) | 2025-12-23T08:15:14Z | 2025-12-24T00:53:17Z |
| mal-2025-192799 | Malicious code in gibertserct15 (npm) | 2025-12-23T08:15:05Z | 2025-12-24T00:53:17Z |
| mal-2025-192798 | Malicious code in flagstealer (npm) | 2025-12-23T08:14:04Z | 2025-12-24T00:53:17Z |
| mal-2025-192797 | Malicious code in fe-cdnpath-transform (npm) | 2025-12-23T08:13:47Z | 2025-12-24T00:53:17Z |
| mal-2025-192796 | Malicious code in estree-util (npm) | 2025-12-23T08:12:35Z | 2025-12-24T00:53:17Z |
| mal-2025-192747 | Malicious code in excluder-mcp-package (npm) | 2025-12-23T18:19:20Z | 2025-12-24T00:53:17Z |
| mal-2025-192746 | Malicious code in excluder-mcp (npm) | 2025-12-23T18:19:20Z | 2025-12-24T00:53:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-3665 | Ruby on Rails: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2024-12-10T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3317 | IBM QRadar SIEM: Mehrere Schwachstellen | 2024-10-30T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2024-1608 | IBM QRadar SIEM und Business Automation Workflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-07-14T22:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2024-1252 | GNOME: Schwachstelle ermöglicht Denial of Service und unspezifische Angriffe | 2024-05-28T22:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0560 | Golang Go: Mehrere Schwachstellen | 2024-03-05T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2023-1577 | Ruby on Rails: Schwachstelle ermöglicht Cross-Site Scripting | 2023-06-27T22:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0570 | D-LINK Router: Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-03-16T23:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0569 | Flowise: Schwachstelle ermöglicht Codeausführung | 2025-03-16T23:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0559 | Shibboleth Service Provider: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-13T23:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0515 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2025-03-10T23:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3153 | Red Hat Enterprise Linux (OpenIPMI): Schwachstelle ermöglicht Codeausführung, DoS oder Umgehung der Authentifizierung | 2024-10-13T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1760 | ffmpeg: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-08-05T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1568 | Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen | 2024-07-09T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-1496 | ffmpeg: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-07-01T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0982 | ffmpeg: Schwachstelle ermöglicht Codeausführung | 2024-04-28T22:00:00.000+00:00 | 2025-03-16T23:00:00.000+00:00 |
| wid-sec-w-2025-0568 | Flowise: Schwachstelle ermöglicht Codeausführung | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0567 | Synology Router Manager: Mehrere Schwachstellen | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0565 | Ruby: Schwachstelle ermöglicht Denial of Service | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0564 | HCL AppScan Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0560 | Autodesk AutoCAD-Produkte: Mehrere Schwachstellen | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0558 | Devolutions Remote Desktop Manager: Mehrere Schwachstellen | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0557 | Red Hat OpenShift Dev Spaces: Schwachstelle ermöglicht Codeausführung | 2025-03-13T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0552 | Juniper JUNOS: Schwachstelle ermöglicht Codeausführung | 2025-03-12T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0549 | GitLab: Mehrere Schwachstellen | 2025-03-12T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0379 | Python: Schwachstelle ermöglicht Manipulation von Dateien | 2025-02-16T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0325 | Intel PROSet Wireless WiFi Software: Mehrere Schwachstellen | 2025-02-11T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2022-0320 | Intel Ethernet Controller: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-02-08T23:00:00.000+00:00 | 2025-03-13T23:00:00.000+00:00 |
| wid-sec-w-2025-0555 | Dell NetWorker: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-12T23:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0554 | IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service | 2025-03-12T23:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0553 | Cisco IOS XR: Mehrere Schwachstellen | 2025-03-12T23:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2022:6155 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.11.0 security, enhancement & bugfix update | 2022-08-24T13:43:53+00:00 | 2026-02-03T21:13:08+00:00 |
| rhsa-2022:6152 | Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.1.0 security update | 2022-09-01T05:40:28+00:00 | 2026-02-03T21:13:08+00:00 |
| rhsa-2022:6147 | Red Hat Security Advisory: OpenShift Container Platform 4.9.47 bug fix and security update | 2022-08-31T16:38:13+00:00 | 2026-02-03T21:13:08+00:00 |
| rhsa-2022:6133 | Red Hat Security Advisory: OpenShift Container Platform 4.10.30 bug fix and security update | 2022-08-31T12:31:50+00:00 | 2026-02-03T21:13:07+00:00 |
| rhsa-2022:6113 | Red Hat Security Advisory: Red Hat Application Interconnect 1.0 Release (rpms) | 2022-08-18T15:12:43+00:00 | 2026-02-03T21:13:06+00:00 |
| rhsa-2022:6103 | Red Hat Security Advisory: OpenShift Container Platform 4.11.1 bug fix and security update | 2022-08-23T15:06:48+00:00 | 2026-02-03T21:13:05+00:00 |
| rhsa-2022:6102 | Red Hat Security Advisory: OpenShift Container Platform 4.11.1 packages and security update | 2022-08-23T14:48:05+00:00 | 2026-02-03T21:13:05+00:00 |
| rhsa-2022:6094 | Red Hat Security Advisory: OpenShift Container Platform 4.10.28 packages and security update | 2022-08-23T18:15:46+00:00 | 2026-02-03T21:13:05+00:00 |
| rhsa-2022:6066 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update | 2022-08-15T09:45:49+00:00 | 2026-02-03T21:13:05+00:00 |
| rhsa-2022:6061 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update | 2022-08-15T09:18:19+00:00 | 2026-02-03T21:13:04+00:00 |
| rhsa-2022:6051 | Red Hat Security Advisory: Logging Subsystem 5.5.0 - Red Hat OpenShift security update | 2022-08-18T16:04:18+00:00 | 2026-02-03T21:13:03+00:00 |
| rhsa-2022:6042 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.24.0 | 2022-08-10T11:39:17+00:00 | 2026-02-03T21:13:03+00:00 |
| rhsa-2022:6040 | Red Hat Security Advisory: Release of OpenShift Serverless 1.24.0 | 2022-08-10T13:13:24+00:00 | 2026-02-03T21:13:02+00:00 |
| rhsa-2022:5909 | Red Hat Security Advisory: Openshift Logging Bug Fix and security update Release (5.2.13) | 2022-08-04T16:17:59+00:00 | 2026-02-03T21:13:01+00:00 |
| rhsa-2022:5908 | Red Hat Security Advisory: Openshift Logging Bug Fix and security update Release (5.3.10) | 2022-08-04T15:59:19+00:00 | 2026-02-03T21:13:01+00:00 |
| rhsa-2022:5875 | Red Hat Security Advisory: OpenShift Container Platform 4.10.26 security update | 2022-08-09T02:34:48+00:00 | 2026-02-03T21:13:01+00:00 |
| rhsa-2022:5866 | Red Hat Security Advisory: go-toolset-1.17 and go-toolset-1.17-golang security and bug fix update | 2022-08-02T09:56:09+00:00 | 2026-02-03T21:13:00+00:00 |
| rhsa-2022:5775 | Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update | 2022-08-01T12:10:47+00:00 | 2026-02-03T21:13:00+00:00 |
| rhsa-2022:5840 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.3 security and bug fix update | 2022-08-02T07:44:20+00:00 | 2026-02-03T21:12:59+00:00 |
| rhsa-2022:5799 | Red Hat Security Advisory: go-toolset and golang security and bug fix update | 2022-08-01T16:07:42+00:00 | 2026-02-03T21:12:59+00:00 |
| rhsa-2022:5730 | Red Hat Security Advisory: OpenShift Container Platform 4.10.25 bug fix and security update | 2022-08-01T11:33:31+00:00 | 2026-02-03T21:12:58+00:00 |
| rhsa-2022:5729 | Red Hat Security Advisory: OpenShift Container Platform 4.10.25 security update | 2022-08-01T11:18:52+00:00 | 2026-02-03T21:12:58+00:00 |
| rhsa-2022:5673 | Red Hat Security Advisory: Release of containers for OSP 16.2.z director operator tech preview | 2022-07-20T15:48:31+00:00 | 2026-02-03T21:12:57+00:00 |
| rhsa-2022:5556 | Red Hat Security Advisory: Logging Subsystem 5.4.3 - Red Hat OpenShift security update | 2022-07-18T16:21:11+00:00 | 2026-02-03T21:12:57+00:00 |
| rhsa-2022:5525 | Red Hat Security Advisory: Service Binding Operator security update | 2022-07-07T10:16:27+00:00 | 2026-02-03T21:12:57+00:00 |
| rhsa-2022:5415 | Red Hat Security Advisory: go-toolset-1.17 and go-toolset-1.17-golang security and bug fix update | 2022-06-30T17:34:35+00:00 | 2026-02-03T21:12:56+00:00 |
| rhsa-2022:5392 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.3.11 security updates and bug fixes | 2022-06-28T17:03:59+00:00 | 2026-02-03T21:12:55+00:00 |
| rhsa-2022:5337 | Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update | 2022-06-30T21:00:23+00:00 | 2026-02-03T21:12:55+00:00 |
| rhsa-2022:5188 | Red Hat Security Advisory: RHACS 3.69 security update | 2022-06-24T19:42:45+00:00 | 2026-02-03T21:12:51+00:00 |
| rhsa-2022:5069 | Red Hat Security Advisory: OpenShift Container Platform 4.11.0 bug fix and security update | 2022-08-10T10:32:53+00:00 | 2026-02-03T21:12:51+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-179-05 | Motorola Solutions MDLC | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsa-22-179-04 | Motorola Solutions MOSCAD IP and ACE IP Gateways | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsa-22-179-03 | Advantech iView | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsa-22-179-02 | Omron SYSMAC CS/CJ/CP Series and NJ/NX Series | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsa-22-179-01 | ABB e-Design | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsma-22-174-01 | OFFIS DCMTK | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-174-05 | Elcomplus SmartICS | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-174-04 | Pyramid Solutions EtherNet/IP Adapter Development Kit | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-174-03 | Secheron SEPCOS Control and Protection Relay | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-174-02 | Yokogawa CAMS for HIS | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-174-01 | Yokogawa STARDOM | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-172-06 | Siemens WinCC OA | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-05 | Phoenix Contact Classic Line Industrial Controllers | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-04 | Phoenix Contact ProConOS and MULTIPROG | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-03 | Phoenix Contact Classic Line Controllers | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-02 | JTEKT TOYOPUC | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsma-22-167-01 | Hillrom Medical Device Management | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-03 | AutomationDirect DirectLOGIC with Ethernet | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-02 | AutomationDirect DirectLOGIC with Serial Communication | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-01 | AutomationDirect C-More EA9 HMI | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-132-10 | Siemens Desigo PXC and DXR Devices | 2022-05-12T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-20-014-05 | Siemens TIA Portal (Update F) | 2020-01-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-16 | Siemens SCALANCE LPE 4903 and SINUMERIK Edge | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-15 | Siemens Teamcenter Active Workspace | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-12 | Siemens Spectrum Power Systems | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-10 | Siemens SCALANCE XM-400 and XR-500 | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-09 | Siemens SCALANCE LPE9403 Third-Party Vulnerabilities | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-07 | Siemens SINEMA Remote Connect Server | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-05 | Siemens EN100 Ethernet Module | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-04 | Siemens Mendix SAML Module | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-fxos-sbbp-XTuPkYTn | Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxos-cmdinj-b63rwkpm | Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxos-cmdinj-b63rwKPm | Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-sft-mitm-tc8azfs2 | Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-sft-mitm-tc8AzFs2 | Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dos-njyvdcla | Cisco Firepower Management Center Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dos-NjYvDcLA | Cisco Firepower Management Center Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dirtrav-nw8xcusb | Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftdfmc-dirtrav-NW8XcuSB | Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-tcp-dos-gdczdqaf | Cisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-tcp-dos-GDcZDqAf | Cisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-ssl-mf3822z | Cisco Firepower Threat Defense Software SSL Input Validation Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-ssl-mf3822Z | Cisco Firepower Threat Defense Software SSL Input Validation Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-ssl-dcrpt-dos-ryekx4yy | Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-ssl-dcrpt-dos-RYEkX4yy | Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-snmp-dos-r8enpbos | Cisco Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-snmp-dos-R8ENPbOs | Cisco Firepower Threat Defense Software SNMP Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-inline-dos-nxquyeqm | Cisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-inline-dos-nXqUyEqM | Cisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-icmp-dos-hxxcycm | Cisco Firepower 4110 ICMP Flood Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-icmp-dos-hxxcycM | Cisco Firepower 4110 ICMP Flood Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-hidcmd-pfdewvbd | Cisco Firepower Threat Defense Software Hidden Commands Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-hidcmd-pFDeWVBd | Cisco Firepower Threat Defense Software Hidden Commands Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-container-esc-fmyqfbqv | Cisco Firepower Threat Defense Software Multi-Instance Container Escape Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-container-esc-FmYqFBQV | Cisco Firepower Threat Defense Software Multi-Instance Container Escape Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-bypass-3ecfd24j | Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-ftd-bypass-3eCfd24j | Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-xss-6vqh4rpz | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-xss-6VqH4rpZ | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-redirect-nyduseqn | Cisco Firepower Management Center Software Open Redirect Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-26886 | Bluetooth: af_bluetooth: Fix deadlock | 2024-04-02T07:00:00.000Z | 2025-09-04T02:33:42.000Z |
| msrc_cve-2025-8194 | Tarfile infinite loop during parsing with negative member offset | 2025-07-02T00:00:00.000Z | 2025-09-04T02:31:30.000Z |
| msrc_cve-2020-36476 | An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory. | 2021-08-02T00:00:00.000Z | 2025-09-04T02:31:03.000Z |
| msrc_cve-2024-46748 | cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT | 2024-09-01T07:00:00.000Z | 2025-09-04T02:30:35.000Z |
| msrc_cve-2023-24537 | Infinite loop in parsing in go/scanner | 2023-04-01T00:00:00.000Z | 2025-09-04T02:29:22.000Z |
| msrc_cve-2025-38553 | net/sched: Restrict conditions for adding duplicating netems to qdisc tree | 2025-08-02T00:00:00.000Z | 2025-09-04T02:28:56.000Z |
| msrc_cve-2025-54409 | AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS) | 2025-08-02T00:00:00.000Z | 2025-09-04T02:25:53.000Z |
| msrc_cve-2019-14202 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:25:42.000Z |
| msrc_cve-2025-37744 | wifi: ath12k: fix memory leak in ath12k_pci_remove() | 2025-05-02T00:00:00.000Z | 2025-09-04T02:23:35.000Z |
| msrc_cve-2025-38070 | ASoC: sma1307: Add NULL check in sma1307_setting_loaded() | 2025-06-02T00:00:00.000Z | 2025-09-04T02:22:58.000Z |
| msrc_cve-2025-8176 | LibTIFF tiffmedian.c get_histogram use after free | 2025-07-02T00:00:00.000Z | 2025-09-04T02:22:03.000Z |
| msrc_cve-2025-37976 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2025-05-02T00:00:00.000Z | 2025-09-04T02:20:05.000Z |
| msrc_cve-2019-14195 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:20:01.000Z |
| msrc_cve-2022-48646 | sfc/siena: fix null pointer dereference in efx_hard_start_xmit | 2024-04-02T07:00:00.000Z | 2025-09-04T02:19:35.000Z |
| msrc_cve-2025-8177 | LibTIFF thumbnail.c setrow buffer overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T02:16:00.000Z |
| msrc_cve-2024-26945 | crypto: iaa - Fix nr_cpus < nr_iaa case | 2024-05-02T07:00:00.000Z | 2025-09-04T02:15:11.000Z |
| msrc_cve-2025-38520 | drm/amdkfd: Don't call mmput from MMU notifier callback | 2025-08-02T00:00:00.000Z | 2025-09-04T02:14:26.000Z |
| msrc_cve-2025-3416 | Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` | 2025-04-02T00:00:00.000Z | 2025-09-04T02:13:49.000Z |
| msrc_cve-2024-53147 | exfat: fix out-of-bounds access of directory entries | 2024-12-02T00:00:00.000Z | 2025-09-04T02:13:09.000Z |
| msrc_cve-2025-38501 | ksmbd: limit repeated connections from clients with the same IP | 2025-08-02T00:00:00.000Z | 2025-09-04T02:11:25.000Z |
| msrc_cve-2022-48666 | scsi: core: Fix a use-after-free | 2024-04-02T07:00:00.000Z | 2025-09-04T02:11:15.000Z |
| msrc_cve-2025-21817 | block: mark GFP_NOIO around sysfs ->store() | 2025-02-02T00:00:00.000Z | 2025-09-04T02:10:59.000Z |
| msrc_cve-2025-8197 | Rejected reason: Maintainers have included reasons at https://gitlab.gnome.org/GNOME/libsoup/-/issues/465 | 2025-07-02T00:00:00.000Z | 2025-09-04T02:10:57.000Z |
| msrc_cve-2023-29409 | Large RSA keys can cause high CPU usage in crypto/tls | 2023-08-01T00:00:00.000Z | 2025-09-04T02:10:32.000Z |
| msrc_cve-2024-26699 | drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr | 2024-04-02T07:00:00.000Z | 2025-09-04T02:09:33.000Z |
| msrc_cve-2025-38533 | net: libwx: fix the using of Rx buffer DMA | 2025-08-02T00:00:00.000Z | 2025-09-04T02:07:07.000Z |
| msrc_cve-2025-38330 | firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) | 2025-07-02T00:00:00.000Z | 2025-09-04T02:05:31.000Z |
| msrc_cve-2024-58096 | wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode | 2025-04-02T00:00:00.000Z | 2025-09-04T02:05:00.000Z |
| msrc_cve-2025-8224 | GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference | 2025-07-02T00:00:00.000Z | 2025-09-04T02:04:38.000Z |
| msrc_cve-2024-26767 | drm/amd/display: fixed integer types and null check locations | 2024-04-02T07:00:00.000Z | 2025-09-04T02:03:42.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13934-1 | ffmpeg-5-5.1.4-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13933-1 | libtss2-esys0-32bit-4.1.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13932-1 | ssh-audit-3.2.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13931-1 | python310-pymongo-4.6.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13930-1 | python310-Jinja2-3.1.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13929-1 | bsdtar-3.7.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13928-1 | python310-python-jose-3.3.0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13927-1 | traefik-2.11.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13926-1 | tpm2.0-tools-5.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13925-1 | libQt6Concurrent6-6.7.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13924-1 | nodejs-electron-29.3.2~20240430g19f0abd6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13923-1 | keylime-ima-policy-0.2.5~0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13922-1 | libluajit2-5_1-2-2.1.20240314-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13921-1 | krb5-1.21.2-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13920-1 | python310-distributed-2024.4.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13919-1 | openjfx-17.0.11.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13918-1 | k9s-0.32.4-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13917-1 | tlrc-1.9.2+0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13916-1 | python310-pip-24.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13915-1 | hcode-2.1-680.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13914-1 | bouncycastle-1.78.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13913-1 | ffmpeg-4-4.4.4-9.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13912-1 | kubetui-1.5.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13911-1 | frr-8.4-11.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13910-1 | blosc2-devel-2.14.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13909-1 | ffmpeg-6-6.1.1-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13908-1 | ffmpeg-5-5.1.4-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13907-1 | MozillaFirefox-125.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13906-1 | ffmpeg-4-4.4.4-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13905-1 | cmctl-1.14.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2024-9623 | Incorrect Authorization in GitLab | 2024-10-13T19:07:44.902Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-9596 | Inclusion of Sensitive Information in Source Code in GitLab | 2024-10-13T19:07:52.600Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-9387 | URL Redirection to Untrusted Site ('Open Redirect') in GitLab | 2024-12-16T07:10:15.986Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-9367 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-12-16T07:10:23.699Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-9164 | Missing Authentication for Critical Function in GitLab | 2024-10-15T19:13:02.001Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8977 | Server-Side Request Forgery (SSRF) in GitLab | 2024-10-13T19:08:00.009Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8974 | Incorrect Provision of Specified Functionality in GitLab | 2024-09-30T08:53:12.028Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8970 | Incorrect Authorization in GitLab | 2024-10-15T19:13:25.413Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8754 | External Control of Critical State Data in GitLab | 2024-09-14T07:05:32.625Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8650 | Incorrect Authorization in GitLab | 2024-12-18T07:10:27.388Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8648 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-11-16T07:10:34.393Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8647 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab | 2024-12-16T07:11:23.983Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8641 | Privilege Context Switching Error in GitLab | 2024-09-14T07:05:45.323Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8640 | Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab | 2024-09-14T07:05:58.226Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8635 | Server-Side Request Forgery (SSRF) in GitLab | 2024-09-14T07:06:09.828Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8631 | Privilege Defined With Unsafe Actions in GitLab | 2024-09-14T07:06:22.032Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8312 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-10-26T07:10:33.009Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8311 | Improper Protection of Alternate Path in GitLab | 2024-09-14T07:06:34.533Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8237 | Inefficient Algorithmic Complexity in GitLab | 2024-11-28T19:10:56.016Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8233 | Inefficient Algorithmic Complexity in GitLab | 2024-12-16T07:12:33.876Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8186 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-03-05T07:13:13.551Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8180 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-11-16T07:11:28.184Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8179 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-12-16T07:12:48.900Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8177 | Inefficient Algorithmic Complexity in GitLab | 2024-11-28T19:11:11.328Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8124 | Inefficient Regular Expression Complexity in GitLab | 2024-09-14T07:06:46.628Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8116 | Incorrect Authorization in GitLab | 2024-12-18T07:12:29.491Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8114 | Missing Authorization in GitLab | 2024-11-28T19:11:26.327Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-8041 | Uncontrolled Resource Consumption in GitLab | 2024-08-26T08:28:32.807Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-7610 | Uncontrolled Resource Consumption in GitLab | 2024-08-10T07:18:42.094Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-7554 | Exposure of Sensitive Information to an Unauthorized Actor in GitLab | 2024-08-10T07:18:59.092Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202307-1163 | Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* Contr… | 2024-04-19T22:54:58.997000Z |
| var-201406-0481 | Multiple products UEFI There is a vulnerability in the firmware. Multiple products UEFI T… | 2024-04-19T22:53:14.481000Z |
| var-201406-0306 | Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS… | 2024-04-19T22:53:14.528000Z |
| var-202311-0293 | A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the s… | 2024-04-19T22:53:04.979000Z |
| var-201612-0228 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6277. Reason: Thi… | 2024-04-19T22:52:23.033000Z |
| var-201612-0015 | NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta… | 2024-04-19T22:52:23.057000Z |
| var-201608-0074 | D-Link Multiple router products offered by have a stack-based buffer overflow vulnerabili… | 2024-04-19T22:52:23.240000Z |
| var-201508-0602 | Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root a… | 2024-04-19T22:52:23.652000Z |
| var-201306-0359 | The Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 … | 2024-04-19T22:51:28.226000Z |
| var-201306-0358 | dasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe … | 2024-04-19T22:51:28.195000Z |
| var-201306-0357 | The web server on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe… | 2024-04-19T22:51:28.129000Z |
| var-201306-0125 | The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and… | 2024-04-19T22:51:28.162000Z |
| var-201303-0222 | Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FI… | 2024-04-19T22:51:28.352000Z |
| var-201211-0266 | The default configuration of Fortinet Fortigate UTM appliances uses the same Certificatio… | 2024-04-19T22:51:28.552000Z |
| var-201502-0199 | Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier … | 2024-04-19T22:51:27.111000Z |
| var-201409-0174 | The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of p… | 2024-04-19T22:51:27.426000Z |
| var-201901-0078 | The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W… | 2024-04-19T22:51:20.248000Z |
| var-201204-0128 | RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a p… | 2024-04-19T22:50:30.237000Z |
| var-201601-0607 | The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 ha… | 2024-04-19T22:50:27.393000Z |
| var-201909-0903 | Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866… | 2024-04-19T22:50:22.818000Z |
| var-201401-0492 | The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not conside… | 2024-04-19T22:49:59.129000Z |
| var-201401-0491 | The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x… | 2024-04-19T22:49:59.198000Z |
| var-201401-0490 | The OSPF implementation on Enterasys switches and routers does not consider the possibili… | 2024-04-19T22:49:59.275000Z |
| var-201401-0489 | The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R7… | 2024-04-19T22:49:59.060000Z |
| var-201401-0488 | The OSPF implementation on Yamaha routers does not consider the possibility of duplicate … | 2024-04-19T22:49:59.162000Z |
| var-201401-0487 | The OSPF implementation in Extreme Networks EXOS does not consider the possibility of dup… | 2024-04-19T22:49:59.096000Z |
| var-201401-0486 | The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does no… | 2024-04-19T22:49:59.343000Z |
| var-201401-0485 | The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not… | 2024-04-19T22:49:59.380000Z |
| var-201401-0484 | The OSPF implementation on Brocade routers does not consider the possibility of duplicate… | 2024-04-19T22:49:59.314000Z |
| var-201308-0274 | The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, … | 2024-04-19T22:49:59.231000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000055 | @WEB ShoppingCart vulnerable to cross-site scripting | 2012-06-05T14:04+09:00 | 2012-06-05T14:04+09:00 |
| jvndb-2012-000054 | Puella Magi Madoka Magica iP for Android vulnerable to information disclosure | 2012-06-01T14:09+09:00 | 2012-06-01T14:09+09:00 |
| jvndb-2012-000053 | Segue vulnerable to SQL injection | 2012-06-01T14:06+09:00 | 2012-06-01T14:06+09:00 |
| jvndb-2012-000052 | Segue vulnerable to cross-site scripting | 2012-06-01T14:03+09:00 | 2012-06-01T14:03+09:00 |
| jvndb-2012-000051 | Logitec LAN-W300N/R series fails to restrict access permissions | 2012-05-25T15:50+09:00 | 2012-05-25T15:50+09:00 |
| jvndb-2012-000050 | Roundcube Webmail vulnerable to cross-site scripting | 2012-05-25T15:43+09:00 | 2012-05-25T15:43+09:00 |
| jvndb-2012-000048 | RSSOwl vulnerable to arbitrary script execution | 2012-05-25T15:37+09:00 | 2012-05-25T15:37+09:00 |
| jvndb-2012-000047 | Sybase EAServer vulnerable to cross-site scripting | 2012-05-25T15:34+09:00 | 2012-05-25T15:34+09:00 |
| jvndb-2012-000044 | iLunascape for Android vulnerable in the WebView class | 2012-05-21T13:56+09:00 | 2012-05-21T13:56+09:00 |
| jvndb-2012-000045 | Drupal Form API fails to validate the redirect URL | 2012-05-17T13:55+09:00 | 2012-05-17T13:55+09:00 |
| jvndb-2012-000043 | baserCMS vulnerable to session management | 2012-05-15T16:56+09:00 | 2012-05-15T16:56+09:00 |
| jvndb-2012-000042 | WEB MART from KENT-WEB vulnerable to cross-site scripting | 2012-05-15T16:53+09:00 | 2012-05-15T16:53+09:00 |
| jvndb-2012-000041 | WEB MART from KENT-WEB vulnerable to cross-site scripting | 2012-05-15T16:44+09:00 | 2012-05-15T16:44+09:00 |
| jvndb-2012-002377 | Arbitrary Code Execution Vulnerability in Hitachi COBOL GUI Option on Windows | 2012-05-15T15:14+09:00 | 2012-05-15T15:14+09:00 |
| jvndb-2012-000035 | Multiple JustSystems products vulnerable to buffer overflow | 2012-04-24T13:37+09:00 | 2012-05-09T19:49+09:00 |
| jvndb-2012-000005 | osCommerce vulnerable to cross-site scripting | 2012-01-20T16:15+09:00 | 2012-04-26T16:58+09:00 |
| jvndb-2012-000037 | sp mode mail issue in the verification of SSL certificates | 2012-04-26T14:21+09:00 | 2012-04-26T14:21+09:00 |
| jvndb-2012-000036 | OSQA vulnerable to cross-site scripting | 2012-04-26T14:15+09:00 | 2012-04-26T14:15+09:00 |
| jvndb-2012-000034 | Multiple JustSystems products may insecurely load dynamic libraries | 2012-04-24T13:36+09:00 | 2012-04-24T13:36+09:00 |
| jvndb-2012-000033 | TwitRocker2 (Android version) vulnerable in the WebView class | 2012-04-20T12:21+09:00 | 2012-04-20T12:21+09:00 |
| jvndb-2012-000031 | ActiveScriptRuby vulnerable to arbitrary Ruby script execution | 2012-04-13T14:08+09:00 | 2012-04-13T14:08+09:00 |
| jvndb-2012-000032 | Dokodemo Rikunabi 2013 vulnerable to cross-site scripting | 2012-04-13T14:03+09:00 | 2012-04-13T14:03+09:00 |
| jvndb-2012-001932 | Vulnerability in Fujitsu Interstage List Works Where Permissions Cannot Be Denied | 2012-04-11T11:45+09:00 | 2012-04-11T11:45+09:00 |
| jvndb-2012-000030 | SENCHA SNS vulnerable to session fixation | 2012-04-05T16:41+09:00 | 2012-04-05T16:41+09:00 |
| jvndb-2012-000029 | SENCHA SNS vulnerable to cross-site request forgery | 2012-04-05T16:41+09:00 | 2012-04-05T16:41+09:00 |
| jvndb-2012-000028 | TOSHIBA TEC e-Studio series vulnerable to authentication bypass | 2012-04-05T16:40+09:00 | 2012-04-05T16:40+09:00 |
| jvndb-2012-000027 | Janetter vulnerable to cross-site request forgery | 2012-03-19T14:31+09:00 | 2012-03-19T14:31+09:00 |
| jvndb-2012-000026 | Janetter vulnerable to information disclosure | 2012-03-19T14:27+09:00 | 2012-03-19T14:27+09:00 |
| jvndb-2012-001793 | JP1/Cm2/Network Node Manager i Denial of Service (DoS) Vulnerability | 2012-03-19T12:04+09:00 | 2012-03-19T12:04+09:00 |
| jvndb-2012-000025 | Redmine vulnerable to cross-site scripting | 2012-03-13T13:39+09:00 | 2012-03-13T13:39+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01992-1 | Security update for golang-github-prometheus-alertmanager | 2025-06-18T02:12:57Z | 2025-06-18T02:12:57Z |
| suse-su-2025:01991-1 | Security update for grafana | 2025-06-18T02:12:17Z | 2025-06-18T02:12:17Z |
| suse-su-2025:01990-1 | Security update for golang-github-prometheus-prometheus | 2025-06-18T02:11:49Z | 2025-06-18T02:11:49Z |
| suse-su-2025:01989-1 | Security update for Multi-Linux Manager Client Tools | 2025-06-18T02:11:23Z | 2025-06-18T02:11:23Z |
| suse-su-2025:01988-1 | Security update for golang-github-prometheus-node_exporter | 2025-06-18T02:10:11Z | 2025-06-18T02:10:11Z |
| suse-su-2025:01987-1 | Security update for Multi-Linux Manager Client Tools | 2025-06-18T02:09:10Z | 2025-06-18T02:09:10Z |
| suse-su-2025:01985-1 | Security update 4.3.15 for Multi-Linux Manager Server | 2025-06-18T02:07:51Z | 2025-06-18T02:07:51Z |
| suse-su-2025:01983-1 | Security update for the Linux Kernel | 2025-06-17T15:32:57Z | 2025-06-17T15:32:57Z |
| suse-su-2025:01982-1 | Security update for the Linux Kernel | 2025-06-17T15:32:16Z | 2025-06-17T15:32:16Z |
| suse-su-2025:01981-1 | Security update for xorg-x11-server | 2025-06-17T15:30:54Z | 2025-06-17T15:30:54Z |
| suse-su-2025:01980-1 | Security update for xorg-x11-server | 2025-06-17T15:30:27Z | 2025-06-17T15:30:27Z |
| suse-su-2025:01979-1 | Security update for xorg-x11-server | 2025-06-17T15:30:13Z | 2025-06-17T15:30:13Z |
| suse-su-2025:01978-1 | Security update for xorg-x11-server | 2025-06-17T15:29:54Z | 2025-06-17T15:29:54Z |
| suse-su-2025:01977-1 | Security update for xorg-x11-server | 2025-06-17T15:29:23Z | 2025-06-17T15:29:23Z |
| suse-su-2025:01975-1 | Security update for xwayland | 2025-06-17T15:28:52Z | 2025-06-17T15:28:52Z |
| suse-su-2025:01974-1 | Security update for xwayland | 2025-06-17T15:28:39Z | 2025-06-17T15:28:39Z |
| suse-su-2025:01972-1 | Security update for the Linux Kernel | 2025-06-17T11:37:43Z | 2025-06-17T11:37:43Z |
| suse-su-2025:20413-1 | Security update for the Linux Kernel | 2025-06-16T15:33:59Z | 2025-06-16T15:33:59Z |
| suse-su-2025:01968-1 | Security update for wireshark | 2025-06-16T14:56:44Z | 2025-06-16T14:56:44Z |
| suse-su-2025:01967-1 | Security update for the Linux Kernel | 2025-06-16T14:56:02Z | 2025-06-16T14:56:02Z |
| suse-su-2025:01966-1 | Security update for the Linux Kernel | 2025-06-16T14:55:49Z | 2025-06-16T14:55:49Z |
| suse-su-2025:01965-1 | Security update for the Linux Kernel | 2025-06-16T14:54:36Z | 2025-06-16T14:54:36Z |
| suse-su-2025:01964-1 | Security update for the Linux Kernel | 2025-06-16T14:54:13Z | 2025-06-16T14:54:13Z |
| suse-su-2025:20421-1 | Security update for the Linux Kernel | 2025-06-16T13:28:28Z | 2025-06-16T13:28:28Z |
| suse-su-2025:01487-1 | Security update for java-11-openjdk | 2025-06-16T12:01:21Z | 2025-06-16T12:01:21Z |
| suse-su-2025:1487-1 | Security update for java-11-openjdk | 2025-06-16T12:00:37Z | 2025-06-16T12:00:37Z |
| suse-su-2025:01487-2 | Security update for java-11-openjdk | 2025-06-16T12:00:37Z | 2025-06-16T12:00:37Z |
| suse-su-2025:20412-1 | Security update for python-setuptools | 2025-06-16T10:54:29Z | 2025-06-16T10:54:29Z |
| suse-su-2025:01962-1 | Security update for apache2-mod_auth_openidc | 2025-06-16T10:04:07Z | 2025-06-16T10:04:07Z |
| suse-su-2025:01961-1 | Security update for grub2 | 2025-06-16T10:03:22Z | 2025-06-16T10:03:22Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-27256 | Library System notapprove.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-06 |
| cnvd-2025-27255 | Library System approve.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-06 |
| cnvd-2025-27254 | Library System add-teacher.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-06 |
| cnvd-2025-27253 | Library System add-student.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-06 |
| cnvd-2025-27252 | Voting System voters_add.php文件上传漏洞 | 2025-10-13 | 2025-11-06 |
| cnvd-2025-27251 | WordPress Noo JobMonster plugin身份验证绕过漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27250 | WordPress Masterstudy plugin文件包含漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27249 | WordPress MasterStudy LMS plugin SQL注入漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27248 | WordPress List category posts plugin信息泄露漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27247 | WordPress Kleo plugin文件包含漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27246 | WordPress King Addons for Elementor plugin权限提升漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27245 | WordPress kallyas plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27244 | WordPress kallyas plugin代码执行漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27243 | WordPress K Elements plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27242 | WordPress Insert PHP Code Snippet plugin缺少授权漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27241 | WordPress Inactive Logout plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27240 | WordPress Gutenberg plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27239 | WordPress Groundhogg Plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27238 | WordPress FuseWP plugin未授权修改数据漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27114 | Tenda AC10缓冲区溢出漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27063 | WordPress Folderly plugin未经授权的数据修改漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27062 | WordPress Flying Images plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27061 | WordPress Essential Addons for Elementor plugin授权缺失漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27060 | WordPress ERI File Library plugin未授权数据访问漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27059 | WordPress Employee Spotlight plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27058 | WordPress Document Library Lite plugin不当授权漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27057 | WordPress Depicter plugin跨站请求伪造漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27056 | WordPress Consulting plugin文件包含漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27055 | WordPress Consulting Elementor Widgets plugin文件包含漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27054 | WordPress Consulting Elementor Widgets plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0026 | Vulnérabilité dans Veeam Backup pour Microsoft Azure | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| certfr-2025-avi-0025 | Multiples vulnérabilités dans Mozilla Firefox pour iOS | 2025-01-13T00:00:00.000000 | 2025-01-13T00:00:00.000000 |
| CERTFR-2025-AVI-0025 | Multiples vulnérabilités dans Mozilla Firefox pour iOS | 2025-01-13T00:00:00.000000 | 2025-01-13T00:00:00.000000 |
| certfr-2025-avi-0024 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0023 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0022 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0021 | Multiples vulnérabilités dans les produits IBM | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0020 | Vulnérabilité dans Asterisk | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| CERTFR-2025-AVI-0024 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| CERTFR-2025-AVI-0023 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| CERTFR-2025-AVI-0022 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| CERTFR-2025-AVI-0021 | Multiples vulnérabilités dans les produits IBM | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| CERTFR-2025-AVI-0020 | Vulnérabilité dans Asterisk | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0018 | Multiples vulnérabilités dans les produits Juniper Networks | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0017 | Vulnérabilité dans les produits HPE Aruba Networking | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0016 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0015 | Multiples vulnérabilités dans GitLab | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0014 | Multiples vulnérabilités dans les produits Ivanti | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| CERTFR-2025-AVI-0018 | Multiples vulnérabilités dans les produits Juniper Networks | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| CERTFR-2025-AVI-0017 | Vulnérabilité dans les produits HPE Aruba Networking | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| CERTFR-2025-AVI-0016 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| CERTFR-2025-AVI-0015 | Multiples vulnérabilités dans GitLab | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| CERTFR-2025-AVI-0014 | Multiples vulnérabilités dans les produits Ivanti | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0013 | Multiples vulnérabilités dans les produits SonicWall | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0012 | Vulnérabilité dans Google Chrome | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0011 | Vulnérabilité dans VMware Aria automation et Cloud Fondation | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0010 | Multiples vulnérabilités dans les produits Splunk | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0008 | Multiples vulnérabilités dans Joomla! | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0007 | Multiples vulnérabilités dans HPE Aruba Networking 501 Wireless Client Bridge | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0006 | Multiples vulnérabilités dans LibreOffice | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |